CVE-2007-0826

CVE-2007-0826 describes a SQL injection in forum.asp of Kisisel Site 2007, exploitable via the forumid parameter to remotely execute arbitrary SQL commands. The vulnerability affects the handling of forumid, leading to partial confidentiality/integrity/availability impacts as described in the NVD...